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The Game Has Changed. 


88% of companies have encouraged or required employees to work from home in response to 
COVID-19 (Gartner, 2020). What was initially an interim solution to the pandemic, now requires a 
long-term strategy, as working from home (WFH) has become the new norm. 


So this begs the question, is your network built to handle 2020 onwards? 


Meeting these WFH expectations without compromising network security is undoubtedly one of 
the most complex challenges that IT managers have ever faced. The UK National Fraud & Cyber 
Security Centre reported that there was a 400% increase in cyber-crime since March 2020. This 
sudden increase leaves organisations vulnerable and with plenty of questions... 


> What does a permanent working from home strategy look like for IT? 
> How can IT minimise risk to the data when employees are working remotely? 


> How can IT ensure that users, applications and IP are protected when there is limited 
visibility? 


> How can IT gain control over end points and troubleshoot when users work remotely? 
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The facts. 


54% of IT professionals think that remote workers are a greater security risk (OPENVPN) 


99% of remote workers would like to continue doing so to some extent (Buffer,2020) 


During the transition to remote work this year, employees struggled with three principal 


challenges: 


38% VPN 37% Wi-Fi connectivity 35% and video 
© access © and reliability © conferencing apps 


The three security objectives in this era are: 


D 
NE 


Secure and protect the Protect users Ensure business 
data of the business working remotely continuity 
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5 questions every IT Manager must 
answer. 


In order to find a secure long-term solution, we need to be asking the right questions. Here are 5 
to get you started: 


01 


Do you know where the biggest 
security threats to the business 
are coming from? 


A lot of airtime is given to external cyber security threats 

such as phishing, hacking and social engineering. Most 
organisations are very aware of the implications to their 
network security and mitigate risks accordingly. However, 
threats can also come from internal sources such as 
employees attempting to access applications that they do not 
have permission for, e.g. access to confidential HR systems. 


We recommend that you identify and understand both internal and external risk factors when 
planning your long-term network security strategy. 
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Does your network have four 
points of protection? 


One of the best ways to assess the risk to your network 
is to consider if someone were to gain access to a users' 


unlocked computer or phone, what data would be at risk? 


We recommended having four points of protection to your 


network: 
Endpoint Protection: Den 
~ 
Ensuring all computers and devices are secure. SS 
> Do devices have antivirus, anti-malware 
mechanisms to secure data on the device itself? Application protection: 
> If employees leave, can IT easily flush data and reset With an increasing number of applications 
the device to factory default? in the cloud, there is a requirement to 
secure data particularly when accessed 
A on a public network. One of the keys 
to application protection is ensuring 
Protecting identity: 10 applications, regardless of where they are, 
The ability to identify and verify the can only be accessed by identified people. 
user and device before granting J 
access to the network and f : ee 
Baek lene e Protecting the premises: = 
applications is now critical. 
Whilst most offices in 2020 haven't seen many visitors, 
ES z ensuring data in the office environment is protected from 
~ 


== external visitors and threats is still paramount. 


Are your users categorised? 


Categorisation of users is important in organisations 
because certain employees hold more sensitive 

data and therefore require different levels of security 
and support. We recommend the starting point for 
categorisation would be: 


VIP and Executives 
Employees with IP e.g. Legal, HR 


Other users 


Once users have been categorised you can easily verify their identity, grant permissions to access 
certain applications, identify which solution is applicable to their level of access and provide the 


appropriate level of support. For most organisations, the majority of remote users will secure their 
network with a VPN. 


ot fuentes 


cisco Meraki | 


04 


Have you adopted a multi-tiered 
approach to network security? 


A multi-tiered approach to network security is critical 
due to the complexity, number of variables and security 
threats to users, the business, and their data. We 
recommend you adopt the Secure Access Service Edge 
(SASE) architecture, to secure your devices. 


The SASE architecture incorporates three components: 


db Networking focuses on secure connectivity, whether that is in the home or office. 
B End-To-End Security focuses on protecting the premises, endpoint and application. 


& Identity Verification focuses on securing and verifying the user and device. 


Networking 


Identity 
Verification 


ETS 


Security 
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Do you have visibility of 
your remote workers? 


IT teams now face the challenge of having to monitor 
network performance remotely, with little to no visibility. 
Troubleshooting, therefore, becomes challenging for IT 
teams, with less IT savvy users, who need to provide 
accurate information in order to diagnose problems 
correctly. We recommend installing an end point and/ 
or access point solution to give IT admins increased 
visibility. 


WHAT'S NEXT? 
Secure your network with Cisco Meraki 


You + Meraki = Unstoppable 


If any of the five must answer questions left you scratching your head, then Meraki has you 
covered. We would like to invite you to our upcoming webinar, “How to protect your network in 
the era of remote working”. In this highly engaging chalk and talk style masterclass, we will deep 
dive into simple and cost-effective solutions to secure your network and remote users. 


Tuesday 27th October 2020 12pm-1pm 


If you just can't wait to join our masterclass, check out three ways Meraki protects the remote 


workforce: 


<p> Providing Visibility - focuses on allowing IT administrators to troubleshoot, monitor 
performance and understand their remote networks. 


End-to-End Security - focuses on protecting the premises, endpoint and application. 


m Enabling Identity Verification - focuses on two factor authentication, SMS verification 
and applying different security rules, depending on the users identity. 
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